REPLY UNDER 37 C.F.R. 1.116 
EXPEDITED PROCEDURE 
TECHNOLOGY CENTER 2131 
Appn. No: 09/314,330 
Docket No: 12177/43101 

IN THE CLAIMS : 

A listing of the claims as they currently stand is provided below. 
1-6. (Canceled). 

7. (Previously presented) A method for providing access control to a web 
server, the method comprising: 

providing a plurality of machines pre-authorized to access the web server; 

associating with each pre-authorized machine an access table storing 
authorization information; 

coupling one of the pre-authorized machines to an access requester; 

verifying that said requester is authorized to access a resource on the web 
server with reference to said access table associated with the pre-authorized 
machine to which the requester is coupled; and 

allowing the requester to assume the identity of said pre-authorized 
machine to which the requester is coupled after verifying that said requester is 
authorized, and 

based on the requester assuming the identity of said pre-authorized 
machine, allowing the requester access to the resource. 

8. (Previously presented) The method of claim 7 wherein said plurality of pre- 
authorized machines includes a first pre-authorized machine that is pre-authorized 
to access a first subset of resources at the web server and a second authorized 
machine that is pre-authorized to access a second subset of resources at the web 
server, wherein said second subset differs from said first subset. 

9. (Previously presented) The method of claim 7 wherein said plurality of pre- 
authorized machines includes a first pre-authorized machine that is pre-authorized 
to access a first subset of resources at the web server and a second pre- 
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authorized machine that is pre-authorized to access a second subset of resources 
at the web server, wherein said second subset overlaps with said first subset. 

1 0. (Previously presented) The method of claim 9 wherein said first and 
second subsets are identical. 

11 -18. (Canceled). 

19. (Previously presented) A network element, comprising: 
a processor; 

an authorization database containing logic for execution by the processor, 
the processor to determine, based on the logic, whether a user is authorized to 
assume the identity of the network element to gain access to a network resource 
that the network element is pre-authorized to access; 

a port to couple the network element to a user; and 

a port to couple the network element to a network resource. 

20. (Previously presented) The network element of claim 19, wherein the 
authorization database correlates user identifiers with resources accessible via the 
network element. 

21 . (Previously presented) A method comprising: 

arranging a network element in a network, the network element being pre- 
authorized to access a set of network resources; 

receiving, at the network element, a request from a user to connect to the 
network element; 

determining whether the user is authorized to connect to the network 
element; 

if so, allowing the user to assume the identity of the network element; and 
accessing, by the user, one of the set of network resources that the network 
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element is pre-authorized to access, based on the user's assuming the identity of 
the network element. 

22. (Previously presented) The method of claim 21 , wherein the network 
element is coupled to one or more network servers providing the set of network 
resources. 

23. (Previously presented The method of claim 21 , further comprising checking 
an identity characteristic of the user to determine whether the user is authorized to 
connect to the network element. 
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